Public bug reported: Hi there,
I'm not sure where to report this bug, if it's Ubuntu, Debian or curl. I'm using newest stable Ubuntu 13.10 with PHP 5.5.3-1ubuntu2.1. Basic authentication via curl does not work anymore if the password contains a semicolon: $curlSettings[CURLOPT_HTTPAUTH] = CURLAUTH_BASIC; $curlSettings[CURLOPT_USERPWD] = '1testuser:pass;word'; $curl = curl_init('http://www.phpgangsta.de/download/curl_auth_test.php'); // content: echo 'Password: '.$_SERVER['PHP_AUTH_PW']; curl_setopt_array($curl, $curlSettings); curl_exec($curl); It outputs just "pass" instead of "pass;word". The same happens if you do this on a command line: curl --basic --user "1testuser:pass;word" http://www.phpgangsta.de/download/curl_auth_test.php The problem seems to be the curl version that is used. I did a few tests: not affected: 5.4.14 (curl 7.19.7) affected: 5.5.3-1ubuntu2.1 (curl 7.32.0) not affected: 5.5.3 (curl 7.22.0) affected: 5.5.9 (curl 7.32.0) not affected: 5.5.9 (curl 7.22.0) not affected: 5.6-alpha2 (curl 7.22.0) The problem seems to be curl 7.32.0 (plus maybe versions before and after) While searching for that bug I just found 1 occurrence, but I cannot believe hat it has not been fixed since July 2013. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=717267 Maybe you can tell me where to report this bug so it gets fixed in current stable Ubuntu 13.10. Michael ** Affects: php5 (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/1281646 Title: php5-curl: Curl truncates basic auth password after semicolon To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1281646/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs